VAMPIRE

eBACS: ECRYPT Benchmarking of Cryptographic Systems


ECRYPT II
General information:IntroductioneBASHeBASCeBAEADeBATSSUPERCOPXBXComputersArch
How to submit new software:Tipshashstreamaeaddhkemencryptsign
List of primitives measured:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
Measurements:lwcsha3hashstreamlwccaesaraeaddhkemencryptsign
List of subroutines:verifydecodeencodesortcorehashblocksxofscalarmult

Measurements of public-key cryptosystems on one machine: amd64; Broadwell+AES (406f1); 2016 Intel Xeon E5-2609 v4; 8 x 1700MHz; bolero, supercop-20241011

[Page version: 20241014 13:34:00]

eBATS (ECRYPT Benchmarking of Asymmetric Systems) is a project to measure the performance of public-key systems. This page presents benchmark results collected in eBATS for public-key encryption:

Each table row lists the first quartile of many speed measurements, the median of many speed measurements, the third quartile of many speed measurements, and the name of the primitive. Measurements with large variance are indicated in red with question marks. The symbol C: means that the current SUPERCOP database does not list IND-CCA2 security as a goal for this public-key cryptosystem. The symbol T: (starting with supercop-20200816) means that the SUPERCOP database at the time of benchmarking did not list constant time as a goal for this implementation. The symbol T!!! means that constant time was listed as a goal for this implementation, but that the implementation failed TIMECOP. (TIMECOP failures are not necessarily security issues; they can sometimes be resolved by, e.g., declaring that a rejection-sampling condition is safe to declassify.)

There is a separate page with more information about each public-key cryptosystem and each implementation. Designers and implementors interested in submitting new public-key cryptosystems and new implementations of existing cryptosystems should read the call for submissions.


Test results

Graphs: old (pkcycles,pkbytes) (ccycles,pkbytes) (ccycles,cbytes) (mcycles,cbytes) (pkbytes,cbytes)

Cycles to generate a key pair
25%50%75%system
547205524455748
T:
r5nd1pke5d
755007620477036
T:
r5nd1pke0d
106436107092108272
T:
r5nd3pke5d
106356108496111520
T:
r5nd3pke0d
131464132612135696
T:
r5nd5pke0d
178800181324183996
T:
r5nd5pke5d
542688544744547584
T:
r5n11pke0d
123566012504441312836
T:
r5n13pke0d
158642815987601668680
T:
r5n15pke0d
274871227620602849800
T:
ledapkc1464
361376036574963761224
T:
ledapkc1364
373432037587603958688
T:
ledapkc1264
4072644?4255736?5282576?
T:
ledapkc13sl
4543772?4553940?6170056?
T:
ledapkc14sl
601311660991246760948
T:
ledapkc12sl
6436068?6483888?9243488?
T:
ledapkc3464
781749278658768008264
T:
ledapkc3364
825638482821369314816
T:
ledapkc3264
9956032998262010268428
T:
ledapkc34sl
98975761000632010444060
T:
ledapkc33sl
108392361115516411473916
T:
lotus128
122298161227382012765380
T:
ledapkc5464
124147161243858813944816
T:
ledapkc32sl
129219201293861212989052
T:
ledapkc5364
15914512?16074488?21453748?
T:
ledapkc54sl
197322481994886021652620
T:
ledapkc5264
198847762013052423547216
T:
ledapkc53sl
211997362142120421608188
T:
lotus192
306768083080942430987792
T:
mcnie4q1281
300453803096675232035072
T:
C:mceliece
323796323353274836902528
T:
ledapkc52sl
355775923804963238802728
T:
lotus256
377054123827840038572220
T:
r5n13pke0smallct
525645165282743652971708
T:
mcnie4q1282
727818887299520873288892
T:
mcnie4q1921
741693087466346475466744
T:
mcnie3q1281
855052248563243285875232
T:
mcnie4q2561
889169288913138089286300
T:
mcnie4q1922
107352320108029504108913812
T:
mcnie3q1282
118060448118242360119283992
T:
mcnie4q2562
63700884?127982256?177732620?
T:
cargocult2048
142378908143195960144004244
T:
mcnie3q1921
85084048?149462620?195816116?
T:
rsa2048
195555992196429148197629636
T:
mcnie3q1922
210428236211677212213033920
T:
mcnie3q2561
343853232345249540346889304
T:
mcnie3q2562
402829094441283505044224994904
T:
pqrsa15
Cycles to encrypt 59 bytes
25%50%75%system
260362632027236
T:
rsa2048
265522728828352
T:
cargocult2048
439644450445060
T:
C:mceliece
102504103216103980
T:
r5nd1pke5d
138228139772162348
T:
lotus128
142252143360144320
T:
r5nd1pke0d
181632182184183312
T:
r5nd3pke5d
197620198476200504
T:
r5nd3pke0d
244788245880247472
T:
r5nd5pke0d
270100273976277672
T:
lotus192
302248303244304344
T:
r5nd5pke5d
313328316988320100
T:
mcnie4q1281
291384?378628?403157?
T:
lotus256
425312426832428728
T:
mcnie4q1282
524272525800527964
T:
mcnie4q1921
577536578324579492
T:
mcnie4q1922
598704599636600644
T:
mcnie4q2561
655884659200681724
T:
ledapkc1264
703728705056706896
T:
mcnie4q2562
766132768088775148
T:
r5n11pke0d
802984805636836608
T:
ledapkc12sl
837000839968848548
T:
ledapkc1364
904816905708908804
T:
ledapkc1464
944324948504954764
T:
ledapkc13sl
115177611937001207204
T:
ledapkc14sl
124602412470561252056
T:
ledapkc3264
129669613088921323164
T:
mcnie3q1281
153953215452921557104
T:
ledapkc3364
163682816384881649628
T:
ledapkc3464
163584416562081673788
T:
mcnie3q1282
165302016580761663740
T:
ledapkc32sl
170760817152921723848
T:
r5n13pke0d
201808020209002028240
T:
ledapkc33sl
199902820350402057044
T:
mcnie3q1921
209609621136482137036
T:
r5n15pke0d
233718423500802354864
T:
ledapkc34sl
240092824379482544412
T:
r5n13pke0smallct
240099224436362459700
T:
ledapkc5264
247067624955322515268
T:
mcnie3q1922
249831225045682515120
T:
ledapkc5364
291043229507242978808
T:
mcnie3q2561
297904029922163011596
T:
ledapkc5464
320980032515843268312
T:
ledapkc52sl
362108436310963663240
T:
ledapkc53sl
367128837248443767560
T:
mcnie3q2562
375429238186203830940
T:
ledapkc54sl
201463322018937220230900
T:
pqrsa15
Cycles to decrypt 59 bytes
25%50%75%system
111028115284121112
T:
r5nd1pke5d
161884?163512?203100?
T:
lotus128
172264175392178560
T:
r5nd1pke0d
225764230244234648
T:
r5nd3pke5d
252044256400262332
T:
r5nd3pke0d
316524320268333816
T:
r5nd5pke0d
317596323924324840
T:
lotus192
424180426984428872
T:
r5nd5pke5d
386656?427576?506913?
T:
lotus256
860580865192871300
T:
r5n11pke0d
916100925756938400
T:
C:mceliece
9891289997961010304
T:
mcnie4q1281
132600413359921349460
T:
mcnie4q1282
164187216537721666780
T:
mcnie4q1921
168201217020561722228
T:
mcnie3q1281
181467618298841842016
T:
mcnie4q1922
183148818467161859108
T:
mcnie4q2561
205728820954482146540
T:
mcnie3q1282
216265621742922187672
T:
mcnie4q2562
218955222503442277916
T:
ledapkc1264
226824822699162280616
T:
rsa2048
226652022755682287580
T:
r5n13pke0d
227802822889042311448
T:
cargocult2048
250010825124242561696
T:
ledapkc1364
249890425262002545732
T:
mcnie3q1921
256724025823322608736
T:
r5n15pke0d
260845226412002753484
T:
ledapkc1464
297739229907523008604
T:
ledapkc13sl
301833630607403091788
T:
mcnie3q1922
323956432645203277960
T:
ledapkc12sl
342648034619843486516
T:
mcnie3q2561
374914838501163904812
T:
ledapkc14sl
444364044990124555768
T:
mcnie3q2562
654531265659566644708
T:
ledapkc3264
638760065838646597440
T:
ledapkc3464
684163668452126847880
T:
ledapkc3364
852513286930688725212
T:
ledapkc32sl
9944500999546810049072
T:
ledapkc33sl
110519601106483211160216
T:
r5n13pke0smallct
111550921120886011284768
T:
ledapkc34sl
138534281398919214244940
T:
ledapkc5264
152268081534459615615400
T:
ledapkc5364
185328841856298419096464
T:
ledapkc5464
207011122084464420970620
T:
ledapkc53sl
208402522103457221269172
T:
ledapkc52sl
221960842231691622450588
T:
ledapkc54sl
127986100128046260128163944
T:
pqrsa15